PCIP Study questions from PCI Training manual 2023 Questions and Answers (Verified Answers)

PCIP Study questions from PCI Training manual 2023 Questions and Answers (Verified Answers) How is skimming used to target PCI data? - ANS Copying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - ANS By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - ANS By skimming the card to get the full track of data, and then making another like card. Using the card information in a "Card-not-present transactions such as e-commerce or mail order, Telephone order. Card data is also sold in bulk to other criminals who perform their own fraud using the stolen data. Who all are targeted ? - ANS Retail, Food and Beaverage, Hospitality, Financial Services, non-profit. EVERYONE! What is the PCI SSC ? - ANS Payment Card Industry Security Service Counsel is an independent industry standards body providing oversight of the development and management of Payment Card Industry Data Security Standards on a global basis. What are some of the PCI SSC founding payment brands. - ANS American Express, Discover Financial, JCB International, Master Card, Visa inc. What are the Resources provided by the PCI SSC? - ANS PCI DSS, PA-DSS, P2PE, PTS (POI, HSM and PIN